PT-2012-5107 · Mozilla+1 · Firefox+1

Blake Kaplan + 1 · Publicado 2012-08-29 · Atualizado 2024-10-21 · CVE-2012-3979

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 15.0 on Android

Description The issue is related to the improper implementation of unspecified callers of the android log print function in Mozilla Firefox on Android. This allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function.

Recommendations For Mozilla Firefox versions prior to 15.0 on Android, update to version 15.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2012-3979

Produtos afetados

Firefox

Suse

Referências · 6

• http://mozilla.org/security/announce/2012/mfsa2012-71.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3979 · Nota de Segurança
• http://securityfocus.com/bid/55344 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=769265 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html · Aviso do Fabricante